CVSS: 2.1EPSS: 0%CPEs: 2EXPL: 0CVE-2006-1844
https://notcve.org/view.php?id=CVE-2006-1844
The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges. • http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356939 http://secunia.com/advisories/19170 http://www.osvdb.org/23922 •
CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0CVE-2004-1001
https://notcve.org/view.php?id=CVE-2004-1001
Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000894 http://secunia.com/advisories/13028 http://www.debian.org/security/2004/dsa-585 https://exchange.xforce.ibmcloud.com/vulnerabilities/17902 •